Privacy policy
In short: Your photos, videos, files and keys stay on your phone. There is no account, no SpaceMoon server, no ads, no separate analytics SDK and no crash reporting. The only data that leaves your phone is an anonymous purchase ID made by the app and your purchase history, so Google Play and RevenueCat can confirm SpaceMoon Pro.
Who we are
This policy covers the SpaceMoon app for Android and this website, spacemoon.app. SpaceMoon is made by APP FACTORY CO., LTD, a company registered in Vietnam. In this policy, "we" means APP FACTORY CO., LTD. You can reach us at support@spacemoon.app.
What we collect
Only what purchases need. To confirm and restore SpaceMoon Pro, the app sends RevenueCat an anonymous purchase ID that the app creates, and RevenueCat keeps your purchase history with it (see Purchases). This is the only data collected, and it is encrypted in transit.
The app does not send anyone your files, your pattern, your recovery phrase, how you use the app, or any advertising or hardware device identifiers. We do not add a separate analytics SDK, advertising or crash reporting tools, and we run no server for the app.
What stays on your phone
Everything you put in SpaceMoon is stored only in the app's private storage on your phone:
- Photos, videos and files you add, with their names and dates, all encrypted.
- Intruder photos, if you turn them on, encrypted.
- The encrypted copy of your recovery phrase, and the keys needed to unlock your vaults, encrypted.
- Settings, the list of apps in the app folder, and the times of recent failed unlock attempts.
We cannot see any of this. It is deleted when you uninstall the app or clear its data. Android's own cloud backup and phone transfer are turned off for SpaceMoon.
Purchases
SpaceMoon Pro is sold through Google Play. Google handles payment, and we never see your card or payment details. Google's use of your information is covered by the Google Privacy Policy.
To confirm whether you have Pro, the app uses RevenueCat, a service that manages in-app purchases. RevenueCat receives:
- an anonymous app user ID, created at random by the app and not linked to your name or email;
- your Google Play purchase receipts and purchase details, such as the product, price, currency and dates;
- the technical details that come with any internet request, such as your IP address, and basic information like the app version and Android version.
RevenueCat does not receive your files, your pattern or your recovery phrase. See the RevenueCat privacy policy. Purchase checks are the only reason the app connects to the internet, and these connections are encrypted (HTTPS). RevenueCat processes this purchase data for us as our service provider, to confirm purchases, prevent fraud and produce purchase statistics. You can see your anonymous purchase ID in the app under Settings > SpaceMoon Pro.
Through the Google Play Console, Google gives us summary statistics such as install counts and ratings. If you have chosen to share usage and diagnostics with Google, Google may also show us crash reports that do not identify you. We do not add any crash reporting of our own.
Permissions
The app asks only for what its features need. You can refuse or remove any of them in Android settings.
- Photos and videos
- To move the photos and videos you choose into SpaceMoon and remove the originals from the gallery after Android asks you to confirm. On Android 14 and later you can allow access to selected items only.
- Camera
- Only if you turn on intruder photos. Photos are taken after wrong patterns and stored encrypted on your phone. They are never sent anywhere.
- Notifications
- For one reminder, 30 days after you start, to check that your recovery phrase is somewhere safe. It does not name the app.
- Fingerprint
- Optional. Android checks your fingerprint. SpaceMoon never receives or stores fingerprint data.
The app also looks at the list of apps on your home screen, only on your phone, so you can add them to the app folder. It does not ask for your location, contacts or access to all files.
Backup files
If you make a backup, the app creates an encrypted file and saves it where you choose, using Android's own save screen. That can be your phone, a computer, or a cloud service you use, such as Google Drive. The file goes straight from your phone to that place. We never receive or see it. The service you choose handles it under its own privacy policy.
If you email us
If you write to us, we receive your email address and what you send. We use it only to reply and delete it when it is no longer needed. Please do not send your pattern, recovery phrase or backup files.
This website
This website uses no cookies, no analytics and no content from other sites. It is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical data such as IP addresses to deliver the site and protect it from attacks.
Children
SpaceMoon is for people aged 13 and over (14 and over in Korea). It is not directed at younger children, and we do not knowingly collect data from them.
Your choices and rights
To delete everything in SpaceMoon on your phone, delete your vaults in the app, or uninstall it.
To have your purchase record deleted, email support@spacemoon.app with the purchase ID shown under Settings > SpaceMoon Pro. We will delete that record from RevenueCat and tell you when it is done. Deleting the record does not cancel a subscription; cancel it in Google Play. You can still get Pro back later with Restore purchases. For data Google holds, see Google's policy.
Changes
If we change this policy, we will post the new version here with a new effective date. If the app ever starts to collect any other data, we will say so clearly before it happens.
Contact
APP FACTORY CO., LTD (Vietnam) · support@spacemoon.app